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APPELLANT'S BRIEF PURSUANT TO 37 C.F.R. § 41.37 



This brief is being filed in support of Appellant's appeal from the rejections of claims 
1-78 dated May 31, 2006. A Notice of Appeal was filed on November 30, 2006. 

I. REAL PARTY IN INTEREST 

Gutenberg Printing LLC is the real party of interest by virtue of an assignment 
recorded October 4, 2004 at Reel 015123, Frame 0050. 

II. RELATED APPEALS AND INTERFERENCES 

The Applicant, the Applicant's legal representative and the real party-in-interest are 
unaware of any appeals or interferences that are related to this appeal. 

III. STATUS OF CLAIMS 

A. Total Number of Claims in Application 

There are seventy-eight (78) claims pending in this application. 

B. Current Status of Claims 

Claims 1 through 78 are pending. Claims 1 through 78 stand rejected. 

C. Claims On Appeal 

Claims 1 through 78 are on appeal. 

IV. STATUS OF AMENDMENTS 

No amendments have been proposed subsequent to the final rejection dated May 31, 

2006. 

V. SUMMARY OF CLAIMED SUBJECT MATTER 

Applicant discloses systems and methods wherein a single session cookie is provided 
to a user for all requests in a single user session. (Abstract). A user database is maintained by 
a central server which stores the session cookie and correlates it to a web application 
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instance, which is identified by system variables stored in the database rather than with 
application variables maintained by an application instance. (Abstract). 

For each request with the cookie after successful sign-in, the runtime environment 
uses the cookie value to identify the user from whom the request originated, retrieve the 
instance of a user object corresponding to that particular user, and pass the request to the user 
object, (p. 14, 1 st f). The user object in turn uses the URL within the request to identify the 
web application that is targeted. (Id.) If an instance of the web application has not been 
created, the user object will create a new instance of the web application. (Id.) After that, the 
user object simply passes the request to the web application instance. (Id.) The web 
application instance processes the request, stores any application states in its instance 
variables and then returns a response. (Id.) 

There are thirty-one (31) independent claims: 1, 7, 8, 9, 10, 17, 18, 19, 20, 26, 27, 28, 
29, 35, 36, 37, 38, 44, 45, 46, 47, 55, 56, 57, 58, 65, 66, 67, 68, 75, and 77. In accordance 
with 37 C.F.R. § 41.37(c)(v), provided below for each of the independent claims is a concise 
explanation of the defined subject matter including references to specification and characters. 

A. Independent Claim 1 

Claim 1 is directed to a method for performing user and session management over a 
computer network (Figs. 5, 4, 3; page 12, second paragraph - page 15, second paragraph). In 
the recited method, a first request for an application instance is received from a user (Fig. 4, 
references 401, 402, 403; Fig. 5, reference 501, 502, 503; page 4, fourth paragraph; page 13, 
first paragraph; page 14, second paragraph). The request includes a single identifier used to 
identify both a session and a user for all user requests without further user and session 
application variables (Fig. 4, reference 408; page 4, fourth paragraph; page 14, first 
paragraph). The recited method further comprises transmitting an application instance 
response to the user based on stored user and session system information (Fig. 4, reference 
411, 412; page 4, fourth paragraph; page 14, first paragraph). 

B. Independent Claim 7 

Claim 7 is directed to an apparatus for performing user and session management over 
a computer network (Figs. 2, 3, 4, 5; page 9, second paragraph - page 15, second paragraph). 
The recited apparatus comprises means (Fig. 2, reference 20, 22, 24) for receiving a first 
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request from a user for an application instance (page 10, third paragraph; Fig. 4, reference 
408; page 4, fourth paragraph; page 14, first paragraph). The request includes a single 
identifier used to identify both a session and a user for all user requests without further user 
and session application variables (Fig. 4, reference 408; page 4, fourth paragraph; page 14, 
first paragraph). The recited apparatus further comprises means (Fig. 2, reference 20, 22, 24) 
for transmitting an application instance response to the user based on stored user and session 
system information (Page 10, third paragraph; Fig. 4, reference 411, 412; page 4, fourth 
paragraph; page 14, first paragraph). 

C. Independent Claim 8 

Claim 8 is directed to a method for performing user and session management over a 
computer network comprising a processor (Fig. 2, reference 20) and a memory (Fig. 2, 
reference 22) in communication with the processor (Page 10, third paragraph). The memory 
stores a plurality of processing instructions for enabling the processor to receive a first 
request from a user for an application instance. The request includes a single identifier used 
to identify both a session and a user for all user requests without further user and session 
application variables (Fig. 4, reference 408, page 14, first paragraph; page 4, fourth 
paragraph). Thereafter, an application instance response is transmitted to the user based on 
stored user and session system information (Fig. 4, reference 411, 412, page 14, first 
paragraph; page 4, fourth paragraph). 

D. Independent Claim 9 

Claim 9 recites a computer-readable medium encoded with processing instructions for 
implementing a method for performing user and session management over a computer 
network (Fig. 2, reference 22, 24; Page 11, fourth paragraph; Page 12, first paragraph). In the 
recited method, a first request for an application instance is received from a user. The request 
includes a single identifier used to identify both a session and a user for all user requests 
without further user and session application variables (Fig. 4, reference 408; page 14, first 
paragraph; page four, fourth paragraph). The recited method further comprises transmitting 
an application instance response to the user based on stored user and session system 
information (Fig. 4, reference 411, 412; page 14, first paragraph; page four, fourth 
paragraph). 
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E. Independent Claim 10 

Claim 10 is directed to a method for performing user and session management over a 
computer network (Figs. 5, 4, 3; page 12, second paragraph - page 15, second paragraph). 
The method comprises receiving a request for an application instance from a user (Fig. 4, 
references 401, 402, 403; Fig. 5, reference 501, 502, 503; page 4, fifth paragraph; page 13, 
first paragraph; page 14, second paragraph). A single identifier that identifies both a session 
and a user is assigned to the user for handling all user requests (Fig. 4, reference 408; Fig. 5, 
reference 504; page 4, fifth paragraph; page 13, second paragraph; page 14, second 
paragraph). The method further comprises transmitting an application instance response to 
the user, wherein the single identifier is static for all requests from the user for a session (Fig. 
4, reference 411, 412; Fig. 5, reference 505; page 4, fifth paragraph; page 14, first and second 
paragraph). 

F. Independent Claim 17 

Claim 17 is directed to an apparatus for performing user and session management 
over a computer network (Figs. 2, 3, 4, 5; page 9, second paragraph - page 15, second 
paragraph). The apparatus comprises means (Fig. 2, reference 20, 22, 24) for receiving a 
request for an application instance from a user (Page 10, third paragraph; Fig. 4, reference 
408, page 14, first paragraph; page 4, fifth paragraph). The apparatus also comprises means 
(Fig. 2, reference 20, 22, 24) for assigning a single identifier to the user for handling all user 
requests (Page 10, third paragraph; Fig. 4, reference 408, page 14, first paragraph; page 4, 
fifth paragraph). Finally, the apparatus comprises means (Fig. 2, reference 20, 22, 24) for 
transmitting an application instance response to the user, wherein the single identifier is static 
for all requests from the user for a session (Page 10, third paragraph; Fig. 4, reference 411, 
412; page 14, first paragraph; page 4, fifth paragraph). 

G. Independent Claim 18 

Claim 18 is directed to an apparatus for performing user and session management 
over a computer network. The apparatus comprises a processor (Fig. 2, reference 20) and a 
memory (Fig. 2, reference 22) in communication with the processor. The memory stores a 
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plurality of processing instructions for enabling the processor to perform steps. The memory 
stores instructions enabling the processor to receive a request for an application instance from 
a user (Fig. 4, references 401, 402, 403; Fig. 5, reference 501, 502, 503; page 4, fifth 
paragraph; page 13, first paragraph; page 14, second paragraph). The memory also stores 
instructions enabling the processor to assign a single identifier to the user used to identify 
both a session and a user for handling all user requests (Fig. 4, reference 408; Fig. 5, 
reference 504; page 4, fifth paragraph; page 13, second paragraph; page 14, second 
paragraph). Finally, the memory also stores instructions enabling the processor to transmit an 
application instance response to the user, wherein the single identifier is static for all requests 
from the user for a session (Fig. 4, reference 411, 412; Fig. 5, reference 505; page 4, fifth 
paragraph; page 14, first and second paragraph). 

H. Independent Claim 19 

Claim 19 is directed to a computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network (Fig. 2, reference 22, 24; Page 11, fourth paragraph; Page 12, first 
paragraph). In the recited method, a request for an application instance is received from a 
user (Fig. 4, references 401, 402, 403; Fig. 5, reference 501, 502, 503; page 4, fifth 
paragraph; page 13, first paragraph; page 14, second paragraph). A single identifier is 
assigned to the user and is used to identify both a session and a user for handling all user 
requests (Fig. 4, reference 408; Fig. 5, reference 504; page 4, fifth paragraph; page 13, second 
paragraph; page 14, second paragraph). Thereafter, an application instance response is 
transmitted to the user, wherein the single identifier is static for all requests from the user for 
a session (Fig. 4, reference 411, 412; Fig. 5, reference 505; page 4, fifth paragraph; page 14, 
first and second paragraph). 

I. Independent Claim 20 

Claim 20 is directed to a method for performing user and session management over a 
computer network (Figs. 5, 4, 3; page 4, sixth paragraph; page 12, second paragraph - page 
15, second paragraph). The method comprises receiving a first request from a user for a first 
application instance, the first request including an identifier used to identify both a session 
and a user (Fig. 4, references 401, 402, 403, 408; Fig. 5, reference 501, 502, 503, 504; page 4, 
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sixth paragraph; page 13, first paragraph; page 14, second paragraph). A first application 
instance response is transmitted to the user (Fig. 4, reference 411, 412; Fig. 5, reference 505; 
page 4, sixth paragraph; page 14, first and second paragraph). The method further comprises 
receiving a second request from the user for a second application instance, the second request 
including the identifier (Fig. 4, reference 408; page 4, sixth paragraph; page 14, first 
paragraph). The request is processed with the second application instance (Fig. 4, reference 
411; page 4, sixth paragraph; page 14, first paragraph). 

J. Independent Claim 26 

Claim 26 is directed to an apparatus for performing user and session management 
over a computer network (Figs. 2, 3, 4, 5; page 4, sixth paragraph; page 9, second paragraph 
- page 15, second paragraph). The apparatus comprises means (Fig. 2, reference 20, 22, 24) 
for receiving a first request from a user for a first application instance, the first request 
including an identifier used to identify both a session and a user (Page 10, third paragraph; 
Fig. 4, reference 408, page 14, first paragraph; page 4, sixth paragraph). The apparatus 
further comprises means (Fig. 2, reference 20, 22, 24) for transmitting a first application 
instance response to the user (Page 10, third paragraph; Fig. 4, reference 411, 412; page 14, 
first paragraph; page 4, sixth paragraph). The apparatus comprises means (Fig. 2, reference 
20, 22, 24) for receiving a second request from the user for a second application instance, the 
second request including the identifier (Page 10, third paragraph; Fig. 4, reference 408, page 
14, first paragraph; page 4, sixth paragraph). The apparatus comprises means (Fig. 2, 
reference 20, 22, 24) for processing the request with the second application instance (Fig. 4, 
reference 411; page 4, sixth paragraph; page 14, first paragraph). 

K. Independent Claim 27 

Claim 27 is directed to an apparatus for performing user and session management 
over a computer network. The apparatus comprises a processor (Fig. 2, reference 20) and a 
memory (Fig. 2, reference 22) in communication with the processor. The memory stores a 
plurality of processing instructions for enabling the processor to perform steps. The memory 
stores instructions enabling the processor to receive a first request from a user for a first 
application instance, the first request including an identifier used to identify both a session 
and a user (Fig. 4, references 401, 402, 403, 408; Fig. 5, reference 501, 502, 503, 504; page 4, 
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sixth paragraph; page 13, first paragraph; page 14, second paragraph). A first application 
instance response is transmitted to the user (Fig. 4, reference 411, 412; Fig. 5, reference 505; 
page 4, sixth paragraph; page 14, first and second paragraph). The method further comprises 
receiving a second request from the user for a second application instance, the second request 
including the identifier (Fig. 4, reference 408; page 4, sixth paragraph; page 14, first 
paragraph). The request is processed with the second application instance (Fig. 4, reference 
411; page 4, sixth paragraph; page 14, first paragraph). 

L. Independent Claim 28 

Claim 28 is directed to a computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network (Fig. 2, reference 22, 24; Page 11, fourth paragraph; Page 12, first 
paragraph). The method comprises receiving a first request from a user for a first application 
instance, the first request including an identifier used to identify both a session and a user 
(Fig. 4, references 401, 402, 403, 408; Fig. 5, reference 501, 502, 503, 504; page 4, sixth 
paragraph; page 13, first paragraph; page 14, second paragraph). A first application instance 
response is transmitted to the user (Fig. 4, reference 411, 412; Fig. 5, reference 505; page 4, 
sixth paragraph; page 14, first and second paragraph). The method further comprises 
receiving a second request from the user for a second application instance, the second request 
including the identifier (Fig. 4, reference 408; page 4, sixth paragraph; page 14, first 
paragraph). The request is processed with the second application instance (Fig. 4, reference 
411; page 4, sixth paragraph; page 14, first paragraph). 

M. Independent Claim 29 

Claim 29 is directed to a method for performing user and session management over a 
computer network (Figs. 5, 4, 3; page 5, first paragraph; page 12, second paragraph - page 15, 
second paragraph). The method comprises receiving, from a user, a first request in a first 
session, the first request including an identifier used to identify both a session and a user (Fig. 
4, references 401, 402, 403, 408; Fig. 5, reference 501, 502, 503, 504; page 5, first 
paragraph; page 13, first paragraph; page 14, second paragraph). A first application instance 
response is transmitted to the user in response to the first request (Fig. 4, reference 411, 412; 
Fig. 5, reference 505; page 5, first paragraph; page 14, first and second paragraph). The 
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method further comprises receiving, from the user, a second request in a second session, the 
second user request including the identifier (Fig. 4, reference 408; page 5, first paragraph; 
page 14, first paragraph). The second request is processed through the first application 
instance (Fig. 4, reference 411; page 5, first paragraph; page 14, first paragraph). 

N. Independent Claim 35 

Claim 35 is directed to an apparatus for performing user and session management 
over a computer network. The recited apparatus comprises a processor (Fig. 2, reference 20) 
and a memory (Fig. 2, reference 22) in communication with the processor. The memory 
stores instructions for receiving, from a user, a first request in a first session, the first request 
including an identifier used to identify both a session and a user. A first application instance 
response is transmitted to the user in response to the first request (Fig. 4, reference 411, 412; 
Fig. 5, reference 505; page 5, first paragraph; page 14, first and second paragraph). The 
memory further comprises instructions for receiving, from the user, a second request in a 
second session, the second user request including the identifier (Fig. 4, reference 408; page 5, 
first paragraph; page 14, first paragraph). The second request is processed through the first 
application instance (Fig. 4, reference 411; page 5, first paragraph; page 14, first paragraph). 

O. Independent Claim 36 

Claim 36 is directed to an apparatus for performing user and session management 
over a computer network (Figs. 2, 3, 4, 5; page 5, first paragraph; page 9, second paragraph - 
page 15, second paragraph) The apparatus comprises means (Fig. 2, reference 20, 22, 24) for 
receiving, from a user, a first request in a first session, the first request including an identifier 
used to identify both a session and a user (Page 10, third paragraph; Fig. 4, reference 408, 
page 14, first paragraph; page 5, first paragraph). The apparatus comprises means (Fig. 2, 
reference 20, 22, 24) for transmitting a first application instance response to the user in 
response to the first request (Page 10, third paragraph; Fig. 4, reference 41 1, 412; page 14, 
first paragraph; page 5, first paragraph). The apparatus further comprises means (Fig. 2, 
reference 20, 22, 24) for receiving, from the user, a second request in a second session, the 
second user request including the identifier (Page 10, third paragraph; Fig. 4, reference 408, 
page 14, first paragraph; page 5, first paragraph). The apparatus further comprises means 
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(Fig. 2, reference 20, 22, 24) for processing the second request through the first application 
instance (Fig. 4, reference 411; page 5, first paragraph; page 14, first paragraph). 



P. Independent Claim 37 

Claim 37 is directed to a computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network (Fig. 2, reference 22, 24; Page 11, fourth paragraph; Page 12, first 
paragraph). The method comprises receiving, from a user, a first request in a first session, the 
first request including an identifier used to identify both a session and a user (Fig. 4, 
references 401, 402, 403, 408; Fig. 5, reference 501, 502, 503, 504; page 5, first paragraph; 
page 13, first paragraph; page 14, second paragraph). A first application instance response is 
transmitted to the user in response to the first request (Fig. 4, reference 411, 412; Fig. 5, 
reference 505; page 5, first paragraph; page 14, first and second paragraph). The method 
further comprises receiving, from the user, a second request in a second session, the second 
user request including the identifier (Fig. 4, reference 408; page 5, first paragraph; page 14, 
first paragraph). The second request is processed through the first application instance (Fig. 
4, reference 411; page 5, first paragraph; page 14, first paragraph). 

Q. Independent Claim 38 

Claim 38 is directed to a method for performing user and session management over a 
computer network (Figs. 5, 4, 3; page 5, second paragraph; page 12, second paragraph - page 
15, second paragraph). The method comprises receiving a first request from a first user 
session for a user, the first request including an identifier (Fig. 4, references 401, 402, 403, 
408; Fig. 5, reference 501, 502, 503, 504; page 5, second paragraph; page 13, first paragraph; 
page 14, second paragraph). The method further comprises receiving a second request from a 
second user session for the user, the second request including the identifier used to identify 
both a session and a user without further user or session application variables (Fig. 4, 
reference 408; page 5, second paragraph; page 14, first paragraph). The method still further 
comprises transmitting a response to the first and second requests, based on the identifier and 
a system session variable stored for each of the first and second user sessions (Fig. 4, 
reference 411, 412; page 5, second paragraph; page 14, first paragraph). 
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R. Independent Claim 44 

Claim 44 recites an apparatus for performing user and session management over a 
computer network (Figs. 2, 3, 4, 5; page 5, second paragraph; page 9, second paragraph - 
page 15, second paragraph). The apparatus comprises means (Fig. 2, reference 20, 22, 24) 
for receiving a first request from a first user session for a user, the first request including an 
identifier (Page 10, third paragraph; Fig. 4, reference 408, page 14, first paragraph; page 5, 
second paragraph). The apparatus further comprises means (Fig. 2, reference 20, 22, 24) for 
receiving a second request from a second user session for the user, the second request 
including the identifier used to identify both a session and a user without further user or 
session application variables (Page 10, third paragraph; Fig. 4, reference 408, page 14, first 
paragraph; page 5, second paragraph). Still further, the apparatus comprises means (Fig. 2, 
reference 20, 22, 24) for transmitting a response to the first and second requests, based on 
the identifier and a system session variable stored for each of the first and second user 
sessions (Fig. 4, reference 411, 412; page 5, second paragraph; page 14, first paragraph). 

S. Independent Claim 45 

Claim 45 is directed to an apparatus for performing user and session management 
over a computer network. The apparatus comprises a processor (Fig. 2, reference 20) and a 
memory (Fig. 2, reference 22) in communication with the processor. The memory stores 
instructions for receiving a first request from a first user session for a user, the first request 
including an identifier (Fig. 4, references 401, 402, 403, 408; Fig. 5, reference 501, 502, 503, 
504; page 5, second paragraph; page 13, first paragraph; page 14, second paragraph). The 
memory further comprises instructions for receiving a second request from a second user 
session for the user, the second request including the identifier used to identify both a session 
and a user without further user or session application variables (Fig. 4, reference 408; page 5, 
second paragraph; page 14, first paragraph). The memory still further comprises instructions 
for transmitting a response to the first and second requests, based on the identifier and a 
system session variable stored for each of the first and second user sessions (Fig. 4, reference 
411, 412; page 5, second paragraph; page 14, first paragraph). 



T. Independent Claim 46 
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Claim 46 is directed to a computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network (Fig. 2, reference 22, 24; Page 11, fourth paragraph; Page 12, first 
paragraph). The method comprises receiving a first request from a first user session for a 
user, the first request including an identifier (Fig. 4, references 401, 402, 403, 408; Fig. 5, 
reference 501, 502, 503, 504; page 5, second paragraph; page 13, first paragraph; page 14, 
second paragraph). The method further comprises receiving a second request from a second 
user session for the user, the second request including the identifier used to identify both a 
session and a user without further user or session application variables (Fig. 4, reference 408; 
page 5, second paragraph; page 14, first paragraph). The method still further comprises 
transmitting a response to the first and second requests, based on the identifier and a system 
session variable stored for each of the first and second user sessions (Fig. 4, reference 411, 
412; page 5, second paragraph; page 14, first paragraph). 

U. Independent Claim 47 

Claim 47 is directed to a method for performing user and session management over a 
computer network (Figs. 5, 4, 3; page 5, third paragraph; page 12, second paragraph - page 
15, second paragraph). The method comprises receiving a first request from a first user 
session for a user, the first request including an identifier (Fig. 4, references 401, 402, 403, 
408; Fig. 5, reference 501, 502, 503, 504; page 5, second paragraph; page 13, first paragraph; 
page 14, second paragraph). The method comprises transmitting a first response to the first 
request, based on the identifier and a first system session variable stored in a user database 
(Fig. 4, reference 412; page 5, third paragraph; page 14, first paragraph). The method also 
comprises receiving a second request from a second user session for the user, the second 
request including the identifier used to identify both a session and a user without further user 
or session application variables (Fig. 4, reference 408; page 5, third paragraph; page 14, first 
paragraph). The method still further comprises transmitting a second response to the second 
request, based on the identifier and a second system session variable stored in the user 
database (Fig. 4, reference 412; page 5, third paragraph; page 14, first paragraph). 



V. Independent Claim 55 
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Claim 55 is directed to an apparatus for performing user and session management 
over a computer network (Figs. 2, 3, 4, 5; page 5, third paragraph; page 9, second paragraph - 
page 15, second paragraph). The apparatus comprises means (Fig. 2, reference 20, 22, 24) 
for receiving a first request from a first user session for a user, the first request including an 
identifier (Page 10, third paragraph; Fig. 4, reference 408, page 14, first paragraph; page 5, 
third paragraph). The apparatus further comprises means (Fig. 2, reference 20, 22, 24) for 
transmitting a first response to the first request, based on the identifier and a first system 
session variable stored in a user database (Fig. 4, reference 412; page 5, third paragraph; page 
14, first paragraph). The apparatus also comprises means (Fig. 2, reference 20, 22, 24) for 
receiving a second request from a second user session for the user, the second request 
including the identifier used to identify both a session and a user without further user or 
session application variables (Page 10, third paragraph; Fig. 4, reference 408, page 14, first 
paragraph; page 5, third paragraph). The apparatus still further comprises means (Fig. 2, 
reference 20, 22, 24) for transmitting a second response to the second request, based on the 
identifier and a second system session variable stored in the user database (Fig. 4, reference 
412; page 5, third paragraph; page 14, first paragraph). 

W. Independent Claim 56 

Claim 56 is directed to an apparatus for performing user and session management 
over a computer network. The recited apparatus comprises a processor (Fig. 2, reference 20) 
and a memory (Fig. 2, reference 22) in communication with the processor. The memory 
stores instructions for receiving a first request from a first user session for a user, the first 
request including an identifier (Fig. 4, references 401, 402, 403, 408; Fig. 5, reference 501, 
502, 503, 504; page 5, third paragraph; page 13, first paragraph; page 14, second paragraph). 
The memory also stores instructions for transmitting a first response to the first request, based 
on the identifier and a first system session variable stored in a user database (Fig. 4, reference 
412; page 5, third paragraph; page 14, first paragraph). The memory also stores instructions 
for receiving a second request from a second user session for the user, the second request 
including the identifier used to identify both a session and a user without further user or 
session application variables (Fig. 4, reference 408; page 5, third paragraph; page 14, first 
paragraph). The memory still further stores instructions for transmitting a second response to 
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the second request, based on the identifier and a second system session variable stored in the 
user database (Fig. 4, reference 412; page 5, third paragraph; page 14, first paragraph). 



X. Independent Claim 57 

Claim 57 is directed to a computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network (Fig. 2, reference 22, 24; Page 11, fourth paragraph; Page 12, first 
paragraph). The method comprises receiving a first request from a first user session for a 
user, the first request including an identifier (Fig. 4, references 401, 402, 403, 408; Fig. 5, 
reference 501, 502, 503, 504; page 5, second paragraph; page 13, first paragraph; page 14, 
second paragraph). The method comprises transmitting a first response to the first request, 
based on the identifier and a first system session variable stored in a user database (Fig. 4, 
reference 412; page 5, third paragraph; page 14, first paragraph). The method also comprises 
receiving a second request from a second user session for the user, the second request 
including the identifier used to identify both a session and a user without further user or 
session application variables (Fig. 4, reference 408; page 5, third paragraph; page 14, first 
paragraph). The method still further comprises transmitting a second response to the second 
request, based on the identifier and a second system session variable stored in the user 
database (Fig. 4, reference 412; page 5, third paragraph; page 14, first paragraph). 

Y. Independent Claim 58 

Claim 58 is directed to a method for performing user and session management over a 
computer network (Figs. 5, 4, 3; page 5, fourth paragraph - page 6, first paragraph; page 12, 
second paragraph - page 15, second paragraph). The method comprises receiving a first 
request from a first user, the first request including a first identifier used to identify both a 
session and a user corresponding to the first user (Fig. 4, references 401, 402, 403, 408; Fig. 
5, reference 501, 502, 503, 504; page 5, fourth paragraph - page 6, first paragraph; page 13, 
first paragraph; page 14, second paragraph). The method further comprises receiving a 
second request from a second user, the second request including a second identifier used to 
identify both a session and a user corresponding to the second user (Fig. 4, reference 408; 
page 5, fourth paragraph - page 6, first paragraph; page 14, first paragraph). The method still 
further comprises generating a first application instance responsive to the first identifier and a 
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second application instance responsive to the second identifier (Fig. 4, reference 412; page 5, 
fourth paragraph - page 6, first paragraph; page 14, first paragraph). 



Z. Independent Claim 65 

Claim 65 is directed to an apparatus for performing user and session management 
over a computer network (Figs. 2, 3, 4, 5; page 5, fourth paragraph - page 6, first paragraph; 
page 9, second paragraph - page 15, second paragraph). The apparatus comprises means 
(Fig. 2, reference 20, 22, 24) for receiving a first request from a first user, the first request 
including a first identifier used to identify both a session and a user corresponding to the first 
user (Page 10, third paragraph; Fig. 4, reference 408, page 14, first paragraph; page 5, fourth 
paragraph - page 6, first paragraph). The apparatus also comprises means (Fig. 2, reference 
20, 22, 24) for receiving a second request from a second user, the second request including a 
second identifier used to identify both a session and a user corresponding to the second user 
(Page 10, third paragraph; Fig. 4, reference 408, page 14, first paragraph; page 5, fourth 
paragraph - page 6, first paragraph). The apparatus still further comprises means (Fig. 2, 
reference 20, 22, 24) for generating a first application instance responsive to the first 
identifier and a second application instance responsive to the second identifier (Fig. 4, 
reference 412; page 5, fourth paragraph - page 6, first paragraph; page 14, first paragraph). 

AA. Independent Claim 66 

Claim 66 is directed to an apparatus for performing user and session management 
over a computer network. The recited apparatus comprises a processor (Fig. 2, reference 20) 
and a memory (Fig. 2, reference 22) in communication with the processor. The memory has 
instructions stored thereon for receiving a first request from a first user, the first request 
including a first identifier used to identify both a session and a user corresponding to the first 
user (Fig. 4, references 401, 402, 403, 408; Fig. 5, reference 501, 502, 503, 504; page 5, 
fourth paragraph - page 6, first paragraph; page 13, first paragraph; page 14, second 
paragraph). The memory also comprises instructions for receiving a second request from a 
second user, the second request including a second identifier used to identify both a session 
and a user corresponding to the second user (Fig. 4, reference 408; page 5, fourth paragraph - 
page 6, first paragraph; page 14, first paragraph). The memory still further comprises 
instructions for generating a first application instance responsive to the first identifier and a 



DOCKET NO,: IVGP-0005 15 PATENT 

second application instance responsive to the second identifier (Fig. 4, reference 412; page 5, 
fourth paragraph - page 6, first paragraph; page 14, first paragraph). 



BB. Independent Claim 67 

Claim 67 is directed to a computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network (Fig. 2, reference 22, 24; Page 11, fourth paragraph; Page 12, first 
paragraph). The method comprises receiving a first request from a first user, the first request 
including a first identifier used to identify both a session and a user corresponding to the first 
user (Fig. 4, references 401, 402, 403, 408; Fig. 5, reference 501, 502, 503, 504; page 5, 
fourth paragraph - page 6, first paragraph; page 13, first paragraph; page 14, second 
paragraph). The method further comprises receiving a second request from a second user, the 
second request including a second identifier used to identify both a session and a user 
corresponding to the second user (Fig. 4, reference 408; page 5, fourth paragraph - page 6, 
first paragraph; page 14, first paragraph). The method still further comprises generating a 
first application instance responsive to the first identifier and a second application instance 
responsive to the second identifier (Fig. 4, reference 412; page 5, fourth paragraph - page 6, 
first paragraph; page 14, first paragraph). 

CC. Independent Claim 68 

Claim 68 is directed to a method for performing user and session management over a 
computer network (Figs. 5, 4, 3; page 5, fourth paragraph - page 6, first paragraph; page 12, 
second paragraph - page 15, second paragraph). The method comprises receiving, from a 
first user, a first request in a first session, the first request including a first identifier used to 
identify both a session and a user (Fig. 4, references 401, 402, 403, 408; Fig. 5, reference 
501, 502, 503, 504; page 6, second paragraph; page 13, first paragraph; page 14, second 
paragraph). A first application instance is transmitted to the first user in response to the first 
request (Fig. 4, reference 411, 412; page 6, second paragraph; page 14, first paragraph). The 
method also comprises receiving, from the first user, a second request in a second session, the 
second request including the first identifier (Fig. 4, reference 408; page 6, first paragraph; 
page 14, first paragraph). The second request is processed through the first application 
instance (Fig. 4, reference 411, 412; page 6, second paragraph; page 14, first paragraph). The 
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method also comprises receiving, from a second user, a third request in a third user session, 
the third request including a second identifier used to identify both a session and a user 
corresponding to the second user (Fig. 4, reference 408; page 6, first paragraph; page 14, first 
paragraph). A second application instance is transmitted to the second user in response to the 
third request (Fig. 4, reference 411, 412; page 6, second paragraph; page 14, first paragraph). 

DD. Independent Claim 75 

Claim 75 is directed to a method for interacting with a central server over a computer 
network (Figs. 5, 4, 3; page 6, third paragraph; page 12, second paragraph - page 15, second 
paragraph). The recited method comprises transmitting a first request to a central server, the 
first request including a user identifier (Fig. 4, references 401, 402, 403, 408; Fig. 5, 
reference 501, 502, 503, 504; page 6, third paragraph; page 13, first paragraph; page 14, 
second paragraph). The method further comprises receiving a first application instance in 
response to the first request (Fig. 4, reference 411, 412; page 6, third paragraph; page 14, first 
paragraph). A second request is transmitted to the central server, the second request 
including the identifier used to identify both a session and a user without further user or 
session application variables (Fig. 4, references 401, 402, 403, 408; page 6, first paragraph; 
page 14, first paragraph). A response is then received to the second request from the 
application instance (Fig. 4, reference 411, 412; page 6, third paragraph; page 14, first 
paragraph). 

EE. Independent Claim 77 

Claim 77 is directed to a method for interacting with a central server over a computer 
network (Figs. 5, 4, 3; page 6, fourth paragraph - page 7, first paragraph; page 12, second 
paragraph - page 15, second paragraph). The method comprises transmitting a first request to 
a central server in a first user session, the first request including a user identifier (Fig. 4, 
references 401, 402, 403, 408; Fig. 5, reference 501, 502, 503, 504; page 6, fourth paragraph 
- page 7, first paragraph; page 13, first paragraph; page 14, second paragraph). A first 
application instance is received in response to the first request (Fig. 4, reference 411, 412; 
page 6, fourth paragraph - page 7, first paragraph; page 14, first paragraph). The method 
further comprises transmitting a second request to the central server in a second user session, 
the second request including the identifier used to identify both a session and a user without 
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further user or session application variables (Fig. 4, references 401, 402, 403, 408; Fig. 5, 
reference 501, 502, 503, 504; page 6, fourth paragraph - page 7, first paragraph; page 13, first 
paragraph; page 14, second paragraph). A response to the second request is received from 
the application instance (Fig. 4, references 411, 412; page 6, fourth paragraph - page 7, first 
paragraph; page 14, first paragraph). 

VI. GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 

Whether the rejection of claims 1, 3-10, 12-20, 22-29, 31-38, 40-49, 51-59, 61-69 and 
71-78 under 35 U.S.C. § 103(a) as allegedly being unpatentable over Wood (US Patent No. 
6,668,322 Bl) in view of Zhao (US Patent 6,035,404) is proper. 

Whether the rejection of claims 2, 11, 21, 30, 39, 50, 60 and 70 as being unpatentable 
over Wood in view of Zhao and Gupta (US Patent No. 6,226,752) is proper. 

VII. ARGUMENT 

Claims 1, 3-10, 12-20, 22-29, 31-38, 40-49, 51-59, 61-69, and 71-78 stand rejected 
under 35 U.S.C. § 103(a) as allegedly being obvious over Wood in view of Zhao. Applicant 
respectfully submits that the cited references do not render the claims obvious. 

A. Wood and Zhao do not teach "receiving ... [a] request including a single 
identifier used to identify both a session and a user for all user requests" 

Applicant's representative claim 1 reads as follows: 

A method for performing user and session management 
over a computer network, comprising: 

receiving a first request from a user for an application 
instance, the request including a single identifier used to 
identify both a session and a user for all user requests 
without further user and session application variables; and 

transmitting an application instance response to the user 
based on stored user and session system information. 

In order to establish a prima facie case of obviousness, the references must teach all of the 
recited claim language and teach combining the references to form the recited combination. 
See M.P.E.P. § 2143.03 ("[t]o establish prima facie obviousness of a claimed invention, all 
the claim limitations must be taught or suggested by the prior art.") Applicant respectfully 
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submits that Wood and Zhao do not teach the claim language emphasized above, and, 
therefore, cannot possibly suggest the recited combination. 

The Examiner acknowledges that Wood, which is the primary reference relied upon 
for the rejection, does not disclose "receiving ... a request including a single identifier used 
to identify both a session and a user for all requests." See (Final Office Action dated May 31, 
2007, p. 4). However, the Examiner contends that Zhao cures this deficiency. Applicant 
respectfully disagrees. Zhao does not disclose or suggest "receiving ... [a] request including 
a single identifier used to identify both a session and a user." 

Zhao discloses a system and method for managing user logins to a restricted computer 
service. (Zhao, Abstract). The disclosed system keeps track of concurrent users assigned to a 
common account or ID number and permits logins to single user accounts. (Zhao, Col. 2, 11. 
10-14). A user login map (ULM) is used to keep track of the number of users logged onto the 
system. (Zhao, Col. 2, 11. 15-16). A user attempting to log into the system enters a user ID 
and password. (Zhao, Col. 2, 11. 26-27). Once the ID and password are verified, the system 
obtains a user mask and an internal user ID (IUID) from the user's profile area. The user 
mask defines the area in the user login map that must be checked to determine if a login will 
be permitted. (Zhao, Col. 2, 11. 26-34). 

For a single account user, one bit in the login map is examined to see if there is 
already a login under that account, or same IUID. If the map indicates there is already a login 
under that account, access is denied. (Zhao, Col. 2, 11. 34-37). 

For a concurrent or multiple user account, more than one bit in the login map is 
examined to see if the maximum number of logins already exist. If the maximum has not 
been met, the requested login is permitted. If the maximum number of logins already exists, 
the system sets a time-out period for the session that has been in progress the longest. (Zhao, 
Col. 2, 11. 43-47). 

Thus, the focus of Zhao is on determining whether too many users are logged into an 
account. Importantly, Zhao makes this determination after receiving a user ID and 
password. Neither the user ID nor the password are a "single identifier used to identify both 
a session and a user" as recited in the claim. Zhao does not teach "receiving ... .[a] request 
including a single identifier used to identify both a session and a user." 

In support of the rejection, the Examiner cites to column 5, lines 39-67 and Figure 6 
of Zhao and specifically to its disclosure of "Session ID associated with IUID & Start Time 
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and Time Out." (Final Office Action dated May 31, 2007, p. 4). Figure 6 and the referenced 
section of Zhao disclose a state lookup table 24. According to Zhao, "[w]hen a user attempts 
to log on, the state lookup table is used for various functions, such as recording session ID's, 
active users, and determining the status of logins already in progress." (Zhao, Col. 5, 11. 40- 
43). Zhao further explains that "each session, which is established after a user login, has an 
entry created in the table. A session ID 48 is generated dynamically for a session." (Zhao, 
Col. 5, 11. 47-50). "The internal user ID (IUID) for the session is also entered into the state 
lookup table. The IUID is obtained from the user profile data in the same manner as the user 
mask." (Zhao, Col. 5, 11. 54-56). "Both are obtained when the user accomplishes the normal 
login procedure, such as entering his own user ID and password successfully." (Zhao, Col. 5, 
11. 56-59). 

In contradistinction to claim 1, Zhao does not teach "receiving ... a single identifier 
used to identify both a session and a user." Rather, Zhao teaches receiving user ID's and 
passwords. Zhao teaches that the session ID, which is relied to support the rejection, is not 
received in a user request. Rather, Zhao teaches that the session ID is generated and 
maintained internally in the state lookup table. Furthermore, Zhao does not teach that the 
session ID identifies both a session and a user. To the contrary, Zhao discloses in the state 
lookup table 24 of Figure 6, that each session ID is stored in relation to a internal user ID. It 
is entirely possible that the session ID's taught by Zhao could be repeated between users. For 
example, a session ID 001001 could be associated with user interface ID 1000, but may also 
be associated with internal user interface ID 1001. 

Thus, neither Zhao nor Wood teach or suggest "receiving ... [a] request including a 
single identifier used to identify both a session and a user." Accordingly, one skilled in the art 
could not combine the references to form the recited combination of claim 1 . 1 Accordingly, 
claim 1 is not rendered obvious. 

B. There is no motivation to combine Wood and Zhao to form the recited 
combination 



1 We note that the Examiner contends that "it is old and well known in the art to identify both a session and a 
user by a single identifier." In support of this argument, the Examiner cites the Zhao. As explained herein, 
Zhao does not disclose the recited features of the claim. In fact, it is not old and well known in the art to 
identify both a session and a user by a single identifier. 
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Furthermore, even assuming for the purpose of argument, that Zhao taught "receiving 
... [a] request including a single identifier used to identify both a session and a user" (which 
it does not), neither Wood nor Zhao teach or suggest combining the teachings of the reference 
to form the recited combination. The Examiner alleges that "[i]t would have been obvious to 
one having ordinary skill in the art at the time of applicant's invention to employ the 
teachings of Zhao with the system of Wood thereby enhancing the security of the system." 
But Zhao does not teach or suggest that its use of a particular number of identifiers enhances 
the security of the system. Furthermore, the Examiner admits Wood does not teach the 
recited language of the claim and therefore can not possibly teach that the recited feature 
enhances security. Thus, neither Zhao nor Wood teach the suggestion, i.e. enhanced security, 
that is the alleged motivation of the combination. Of course, the recited combination of claim 
1 is not obvious, which is exactly the reason why neither Zhao nor Wood teach the recited 
combination. The Examiner's arguments for combining the references is motivated not by 
the references or the teachings of the prior art, but rather, by impermissible hindsight. 

Indeed, Wood actually teaches away from combining to form the recited 
combination. The Final Rejection correlates the "session identifier" of Wood to the "single 
identifier" of claim 1. (Final Rejection dated May 31, 2006, pp. 2-3). But at column 8, lines 
9-25, Wood describes using two separate identifiers within a session to identify the session 
and the user. In particular, Wood teaches using "session id" and "principal id." Also, Wood 
describes that there are additional user session and application variables, namely, "a trust 
level, group ids, a creation time, and expiration time." In Wood, the trust level is associated 
with the unique principal id and "serves as a basis for evaluating whether a principal 
associated with the session credentials has been authenticated to a sufficient level. . ." 
(emphasis added) (Col. 8, lines 26-30). If the same id were used for the session and user, it 
would not be possible to evaluate user authentication using the trust level, as required by 
Wood. Thus, modifying Wood to include the "single identifier" and not a trust level would 
render Wood unsatisfactory for this intended purpose. 

C. Conclusion 

Therefore, because neither Wood nor Zhao teach all of the recited claim language, the 
references cannot be combined to form the recited combination of claim 1 and all claims 
depending therefrom. See M.P.E.P. § 2143.03. Furthermore, even if Wood or Zhao taught 
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the recited language of the claims, there is no motivation to combine the references to form 
the recited combination. For similar reasons, independent claims 7, 8, 9, 10, 17, 18, 19, 20, 
26, 27, 28, 29, 35, 36, 38, 44, 45, 46, 47, 55, 56, 57, 58, 65, 66, 67, 68, 75, and 77 , and all 
claims depending therefrom are patentable over the cited references. Withdrawal of the 
rejections under 35 U.S.C. § 103(a) is respectfully requested. 

Applicant respectfully submits that the rejection of claims under 35 U.S.C. § 103(a) 
was improper. For the all of the foregoing reasons, Applicant respectfully requests that the 
Board reverse the rejections. 



Woodcock Washburn LLP 
Cira Centre 
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Philadelphia, PA 19104-2891 
Telephone: (215) 568-3100 
Facsimile: (215) 568-3439 



Date: September 24, 2007 



/John E. McGlynn/ 
John E. McGlynn 
Registration No. 42,863 
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VIII. CLAIMS APPENDIX 

1. (Previously Presented) A method for performing user and session management over a 
computer network, comprising: 

receiving a first request from a user for an application instance, the request including 
a single identifier used to identify both a session and a user for all user requests without 
further user and session application variables; and 

transmitting an application instance response to the user based on stored user and 
session system information. 

2. (Original) The method of claim 1, wherein the single identifier includes a random 
number associated with the user. 

3. (Original) The method of claim 1, further comprising: 
authenticating an identification of the user; and 
assigning the single identifier to the user. 

4. (Original) The method of claim 3, wherein said authenticating comprises: 
transmitting a request for a user name and a password to the user; 
receiving the user name and password from the user; and 

comparing the user name and password to stored parameters. 

5. (Original) The method of claim 1, further comprising: 

receiving a second request from the user for a second application instance, the second 
request including the identifier; and 

processing the request with the application instance. 

6. (Original) The method of claim 1, further comprising: 

receiving a second request from a second user, the second request including a second 
identifier corresponding to the second user; and 

generating a second application instance responsive to the second identifier. 

7. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 
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means for receiving a first request from a user for an application instance, the request 
including a single identifier used to identify both a session and a user for all user requests 
without further user and session application variables; and 

means for transmitting an application instance response to the user based on stored 
user and session system information. 

8. (Previously Presented) A method for performing user and session management over a 
computer network, comprising: 

a processor; and 

a memory in communication with the processor, the memory for storing a plurality of 
processing instructions for enabling the processor to: 

receive a first request from a user for an application instance, the request 
including a single identifier used to identify both a session and a user for all user requests 
without further user and session application variables; and 

transmit an application instance response to the user based on stored user and 
session system information. 

9. (Previously Presented) A computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network, the method comprising: 

receiving a first request from a user for an application instance, the request including 
a single identifier used to identify both a session and a user for all user requests without 
further user and session application variables; and 

transmitting an application instance response to the user based on stored user and 
session system information. 

10. (Previously Presented) A method for performing user and session management over a 
computer network, comprising: 

receiving a request for an application instance from a user; 

assigning a single identifier used to identify both a session and a user to the user for 
handling all user requests; and 

transmitting an application instance response to the user, wherein the single 
identifier is static for all requests from the user for a session. 
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11. (Original) The method of claim 10, wherein the single identifier is a random number. 



12. (Original) The method of claim 10, wherein the single identifier does not include user 
or session application variables for use by the application instance. 

13. (Original) The method of claim 10, wherein said assigning further comprises: 
authenticating an identification of the user. 

14. (Original) The method of claim 13, wherein said authenticating comprises: 
transmitting a request for a user name and a password to the user; 
receiving the user name and password from the user; and 

comparing the user name and password to stored parameters. 

15. (Original) The method of claim 10, further comprising: 

receiving a second request from the user for a second application instance, the second 
request including the identifier; and 

processing the request with the second application instance, while maintaining the 
first application instance. 

16. (Original) The method of claim 1, further comprising: 

receiving a second request from a second user, the second request including a second 
identifier corresponding to the second user; and 

generating a second application instance responsive to the second identifier. 

17. (Original) An apparatus for performing user and session management over a computer 
network, comprising: 

means for receiving a request for an application instance from a user; 
means for assigning a single identifier to the user for handling all user requests; and 
means for transmitting an application instance response to the user, wherein the single 
identifier is static for all requests from the user for a session. 

18. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

a processor; and 



DOCKET NO,: IVGP-0005 25 PATENT 

a memory in communication with the processor, the memory for storing a plurality of 
processing instructions for enabling the processor to: 

receive a request for an application instance from a user; assign a single identifier to 
the user used to identify both a session and a user for handling all user requests; and transmit 
an application instance response to the user, wherein the single identifier is static for all 
requests from the user for a session. 

19. (Previously Presented) A computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network, the method comprising: 

receiving a request for an application instance from a user; 

assigning a single identifier to the user used to identify both a session and a user for 
handling all user requests; and 

transmitting an application instance response to the user, wherein the single identifier 
is static for all requests from the user for a session. 

20. (Previously Presented) A method for performing user and session management over a 
computer network, comprising: 

receiving a first request from a user for a first application instance, the first request 
including an identifier used to identify both a session and a user; 

transmitting a first application instance response to the user; 

receiving a second request from the user for a second application instance, the second 
request including the identifier; and 

processing the request with the second application instance. 

21. (Original) The method of claim 20, wherein the identifier is a random number. 

22. (Original) The method of claim 10, wherein the identifier does not include user or 
session variables for use by the application instance. 

23. (Original) The method of claim 20, further comprising: 
authenticating an identification of the user; and 
assigning the identifier to the user 

24. (Original) The method of claim 13, wherein said authenticating comprises: 
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transmitting a request for a user name and a password to the user; 
receiving the user name and password from the user; and 
comparing the user name and password to stored parameters. 

25. (Original) The method of claim 20, further comprising: 

receiving a third request from a second user, the third request including a second 
identifier corresponding to the second user; and 

generating a second application instance responsive to the second identifier. 

26. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

means for receiving a first request from a user for a first application instance, the 
first request including an identifier used to identify both a session and a user; 
means for transmitting a first application instance response to the user; 
means for receiving a second request from the user for a second application instance, 
the second request including the identifier; and 

means for processing the request with the second application instance. 

27. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

a processor; and 

a memory in communication with the processor, the memory for storing a plurality of 
processing instructions for enabling the processor to: 

receive a first request from a user for a first application instance, the first 
request including an identifier used to identify both a session and a user; 

transmit a first application instance response to the user; receive a second 
request from the user for a second application instance, the second request including the 
identifier; and 

process the request with the second application instance. 

28. (Previously Presented) A computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network, the method comprising: 
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receiving a first request from a user for a first application instance, the first request 
including an identifier used to identify both a session and a user; 

transmitting a first application instance response to the user; 

receiving a second request from the user for a second application instance, the second 
request including the identifier; and 

processing the request with the second application instance. 

29. (Previously Presented) A method for performing user and session management over a 
computer network, comprising: 

receiving, from a user, a first request in a first session, the first request including an 
identifier used to identify both a session and a user; 

transmitting a first application instance response to the user in response to the first 
request; 

receiving, from the user, a second request in a second session, the second user request 
including the identifier; and 

processing the second request through the first application instance. 

30. (Original) The method of claim 29, wherein the first identifier includes a random 
number associated with the user. 

31. (Original) The method of claim 29, further comprising: 
authenticating an identification of the user; and 
assigning the identifier to the user. 

32. (Original) The method of claim 31, wherein said authenticating comprises: 
transmitting a request for a user name and a password to the user; 
receiving the user name and password from the user; and 

comparing the user name and password to stored parameters. 

33. (Original) The method of claim 29, further comprising: 

receiving a third request from the user in the first user session, the third request 
including the identifier; and 

processing the request with the application instance. 

34. (Original) The method of claim 29, further comprising: 
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receiving a third request from a second user, the third request including a second 
identifier corresponding to the second user; and 

generating a second application instance responsive to the second identifier. 

35. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

a processor; and 

a memory in communication with the processor, the memory for storing a plurality of 
processing instructions for enabling the processor to: 

receive, from a user, a first request in a first session, the first request including 
an identifier used to identify both a session and a user; 

transmit a first application instance response to the user in response to the first 

request; 

receive, from the user, a second request in a second session, the second user 
request including the identifier; and 

process the second request through the first application instance. 

36. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

means for receiving, from a user, a first request in a first session, the first request 
including an identifier used to identify both a session and a user; 

means for transmitting a first application instance response to the user in response to 
the first request; 

means for receiving, from the user, a second request in a second session, the second 
user request including the identifier; and 

means for processing the second request through the first application instance. 

37. (Previously Presented) A computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network, the method comprising: 

receiving, from a user, a first request in a first session, the first request including 
an identifier used to identify both a session and a user; 

transmitting a first application instance response to the user in response to the first 
request; 
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receiving, from the user, a second request in a second session, the second user request 
including the identifier; and 

processing the second request through the first application instance. 

38. (Previously Presented) A method for performing user and session management over a 
computer network, comprising: 

receiving a first request from a first user session for a user, the first request including 
an identifier; 

receiving a second request from a second user session for the user, the second request 
including the identifier used to identify both a session and a user without further user or 
session application variables; and 

transmitting a response to the first and second requests, based on the identifier and a 
system session variable stored for each of the first and second user sessions. 

39. (Original) The method of claim 38, wherein the single identifier includes a random 
number associated with the user. 

40. (Original) The method of claim 38, further comprising: 
authenticating an identification of the user; and 
assigning the identifier to the user. 

41. (Original) The method of claim 40, wherein said authenticating comprises: 
transmitting a request for a user name and a password to the user; 
receiving the user name and password from the user; and 

comparing the user name and password to stored parameters. 

42. (Original) The method of claim 38, further comprising: 

receiving a third request from one of the first and the second user sessions, the third 
request including the identifier; and 

processing the request with the application instance. 

43. (Original) The method of claim 38, further comprising: 

receiving a third request from a second user, the third request including a second 
identifier corresponding to the second user; and 

generating a second application instance responsive to the second identifier. 
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44. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

means for receiving a first request from a first user session for a user, the first request 
including an identifier; 

means for receiving a second request from a second user session for the user, the 
second request including the identifier used to identify both a session and a user without 
further user or session application variables; and 

means for transmitting a response to the first and second requests, based on the 
identifier and a system session variable stored for each of the first and second user sessions. 

45. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

a processor; and 

a memory in communication with the processor, the memory for storing a plurality of 
processing instructions for enabling the processor to: 

receive a first request from a first user session for a user, the first request 
including an identifier; 

receive a second request from a second user session for the user, the second 
request including the identifier used to identify both a session and a user without further user 
or session application 

variables; and 

transmit a response to the first and second requests, based on the identifier and 
a system session variable stored for each of the first and second user sessions. 

46. (Previously Presented) A computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network, comprising: 

receiving a first request from a first user session for a user, the first request including 
an identifier; 

receiving a second request from a second user session for the user, the second request 
including the identifier used to identify both a session and a user without further user or 
session application variables; and 
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transmitting a response to the first and second requests, based on the identifier and a 
system session variable stored for each of the first and second user sessions. 

47. (Previously Presented) A method for performing user and session management over a 
computer network, comprising: 

receiving a first request from a first user session for a user, the first request including 
an identifier; and 

transmitting a first response to the first request, based on the identifier and a first 
system session variable stored in a user database. 

receiving a second request from a second user session for the user, the second request 
including the identifier used to identify both a session and a user without further user or 
session application variables; and 

transmitting a second response to the second request, based on the identifier and a 
second system session variable stored in the user database. 

48. (Original) The method of claim 47, wherein the first response and the second response 
are generated from a single application instance. 

49. (Original) The method of claim 48, wherein the identifier does not include further 
user and session variables for use by the application instance. 

50. (Original) The method of claim 47, wherein the identifier includes a random number 
associated with the user. 

51. (Original) The method of claim 47, further comprising: 
authenticating an identification of the user; and 
assigning the single identifier to the user. 

52. (Original) The method of claim 51, wherein said authenticating comprises: 
transmitting a request for a user name and a password to the user; 
receiving the user name and password from the user; and 

comparing the user name and password to stored parameters. 

53. (Original) The method of claim 48, further comprising: 
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receiving a third request from the user in the first user session, the third request 
including the identifier; and 

processing the request with the application instance. 

54. (Original) The method of claim 47, further comprising: 

receiving a third request from a second user, the third request including a second 
identifier corresponding to the second user; and 

generating a second application instance responsive to the second identifier. 

55. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

means for receiving a first request from a first user session for a user, the first request 
including an identifier; and 

means for transmitting a first response to the first request, based on the identifier 
and a first system session variable stored in a user database. 

means for receiving a second request from a second user session for the user, the 
second request including the identifier used to identify both a session and a user without 
further user or session application variables; and 

means for transmitting a second response to the second request, based on the identifier 
and a second system session variable stored in the user database. 

56. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

a processor; and 

a memory in communication with the processor, the memory for storing a plurality of 
processing instructions for enabling the processor to: 

receive a first request from a first user session for a user, the first request 
including an identifier; and 

transmit a first response to the first request, based on the identifier and a first 
system session variable stored in a user database. 

receive a second request from a second user session for the user, the second 
request including the identifier used to identify both a session and a user without further user 
or session application variables; and 
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transmit a second response to the second request, based on the identifier and a 
second system session variable stored in the user database. 

57. (Previously Presented) A computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network, the method comprising: 

receiving a first request from a first user session for a user, the first request including 
an identifier; and 

transmitting a first response to the first request, based on the identifier and a first 
system session variable stored in a user database. 

receiving a second request from a second user session for the user, the second request 
including the identifier used to identify both a session and a user without further user or 
session variables; and 

transmitting a second response to the second request, based on the identifier and a 
second system session variable stored in the user database. 

58. (Previously Presented) A method for performing user and session management over a 
computer network, comprising: 

receiving a first request from a first user, the first request including a first identifier 
used to identify both a session and a user corresponding to the first user; 

receiving a second request from a second user, the second request including a second 
identifier used to identify both a session and a user corresponding to the second user; and 

generating a first application instance responsive to the first identifier and a second 
application instance responsive to the second identifier. 

59. (Original) The method of claim 58, wherein the first identifier and the second 
identifier do not include user and session application variables for use by the first and the 
second application instances. 

60. (Original) The method of claim 58, wherein the first identifier includes a random 
number associated with the first user and the second identifier includes a second random 
number associated with the second user. 



61. 



(Original) The method of claim 58, further comprising: 
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authenticating an identification of the first and second users; and 

assigning the first identifier to the first user and the second identifier to the second 

user. 

62. (Original) The method of claim 61, wherein said authenticating comprises: 
transmitting a request for a user name and a password to the user; 
receiving the user name and password from the user; and 

comparing the user name and password to stored parameters. 

63. (Original) The method of claim 58, further comprising: 

receiving a third request from the first user, the third request including the first 
identifier; and 

processing the request with the first application instance. 

64. (Original) The method of claim 58, further comprising: 

receiving a third request from the second user, the third request including the second 
identifier; and 

processing the request with the second application instance. 

65. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

means for receiving a first request from a first user, the first request including a first 
identifier used to identify both a session and a user corresponding to the first user; 

means for receiving a second request from a second user, the second request including 
a second identifier used to identify both a session and a user corresponding to the second 
user; and 

means for generating a first application instance responsive to the first identifier and a 
second application instance responsive to the second identifier. 

66. (Previously Presented) An apparatus for performing user and session management 
over a computer network, comprising: 

a processor; and 

a memory in communication with the processor, the memory for storing a plurality of 
processing instructions for enabling the processor to: 
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receive a first request from a first user, the first request including a first 
identifier used to identify both a session and a user corresponding to the first user; 

receive a second request from a second user, the second request including a 
second identifier used to identify both a session and a user corresponding to the second user; 
and 

generate a first application instance responsive to the first identifier and a 
second application instance responsive to the second identifier. 

67. (Previously Presented) A computer-readable medium encoded with processing 
instructions for implementing a method for performing user and session management over a 
computer network, the method comprising: 

receiving a first request from a first user, the first request including a first identifier 
used to identify both a session and a user corresponding to the first user; 

receiving a second request from a second user, the second request including a second 
identifier used to identify both a session and a user corresponding to the second user; and 

generating a first application instance responsive to the first identifier and a second 
application instance responsive to the second identifier. 

68. (Previously Presented) A method for performing user and session management over a 
computer network, comprising: 

receiving, from a first user, a first request in a first session, the first request including 
a first identifier used to identify both a session and a user; 

transmitting a first application instance to the first user in response to the first request; 

receiving, from the first user, a second request in a second session, the second request 
including the first identifier; 

processing the second request through the first application instance; 

receiving, from a second user, a third request in a third user session, the third request 
including a second identifier used to identify both a session and a user corresponding to the 
second user; and 

transmitting a second application instance to the second user in response to the third 
request. 
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69. (Original) The method of claim 68, wherein the first identifier and the second 
identifier do not include further user and session application variables for use by the first and 
the second application instances. 

70. (Original) The method of claim 68, wherein the first identifier includes a random 
number associated with the first user and the second identifier includes a second random 
number associated with the second user. 

71. (Original) The method of claim 68, further comprising: 
authenticating an identification of the first and second users; and 

assigning the first identifier to the first user and the second identifier to the second 
user based on said authenticating. 

72. (Original) The method of claim 71, wherein said authenticating comprises: 
transmitting a request for a user name and a password to the first and second 
users; 

receiving the user name and password from the first and the second users; and 
comparing the user name and password to stored parameters. 

73. (Original) The method of claim 68, further comprising: 

receiving a fourth request from the first user, the fourth request including the first 
identifier without any further user and session application variables; and 

processing the request with the first application instance based on stored user and 
session management system variables. 

74. (Original) The method of claim 68, further comprising: 

receiving a fourth request from the second user, the fourth request including the 
second identifier without any further user and session variables; and 

processing the request with the second application instance based on stored user and 
session management system variables. 

75. (Previously Presented) A method for interacting with a central server over a computer 
network, comprising: 

transmitting a first request to a central server, the first request including a user 
identifier; 
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receiving a first application instance in response to the first request; and 
transmitting a second request to the central server, the second request including the 

identifier used to identify both a session and a user without further user or session application 

variables; and 

receiving a response to the second request from the application instance. 

76. (Original) The method of claim 75, wherein the first identifier does not include user 
and session variables for use by the first application instance. 

77. (Previously Presented) A method for interacting with a central server over a computer 
network, comprising: 

transmitting a first request to a central server in a first user session, the first request 
including a user identifier; 

receiving a first application instance in response to the first request; and 

transmitting a second request to the central server in a second user session, the second 
request including the identifier used to identify both a session and a user without further user 
or session application variables; and 

receiving a response to the second request from the application instance. 

78. (Original) The method of claim 77, wherein the first identifier does not include user 
and session variables for use by the application instance. 

IX. EVIDENCE APPENDIX 

There is no additional evidence to be submitted in connection with this Appeal Brief. 

X. RELATED PROCEEDINGS APPENDIX 

None 



